CVS commit: pkgsrc/www/py-tornado

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Tue Nov 10 09:08:21 UTC 2026

Modified Files:
        pkgsrc/www/py-tornado: Makefile distinfo

Log Message:
py-tornado: updated to 6.6.1

What's new in Tornado 6.6.1

Security Fixes

- ``StaticFileHandler`` will no longer serve NTFS alternate data streams as if they were regular
  files on Windows.
- ``SimpleAsyncHTTPClient`` no longer hangs and leaks resources when processing a redirect to
  URL schemes other than ``http`` and ``https``.
- Parsing of percent-encoded data in URLs is much more efficient, preventing potential
  denial-of-service attacks.
- Additional forms of open redirects in ``RedirectHandler`` have been fixed (in addition to
  the ones fixed in 6.6.0)
- Open redirects in ``@addslash`` and ``@removeslash`` have been fixed.

Deprecation notice

- HTTP header parsing currently supports both CRLF and LF-only line endings. LF-only line endings
  are already deprecated and slated for removal in Tornado 7.0. This change is being rescheduled
  to Tornado 6.7.

Bug Fixes

- Certain patterns that worked with ``RedirectHandler`` in Tornado 6.5 and before did not work
  correctly in Tornado 6.6.0. This was an unintended regression and the original behavior has
  been restored.


To generate a diff of this commit:
cvs rdiff -u -r1.53 -r1.54 pkgsrc/www/py-tornado/Makefile
cvs rdiff -u -r1.40 -r1.41 pkgsrc/www/py-tornado/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-tornado/Makefile
diff -u pkgsrc/www/py-tornado/Makefile:1.53 pkgsrc/www/py-tornado/Makefile:1.54
--- pkgsrc/www/py-tornado/Makefile:1.53 Mon Oct 26 08:11:35 2026
+++ pkgsrc/www/py-tornado/Makefile      Tue Nov 10 09:08:21 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.53 2026/10/26 08:11:35 adam Exp $
+# $NetBSD: Makefile,v 1.54 2026/11/10 09:08:21 adam Exp $
 
-DISTNAME=      tornado-6.6
+DISTNAME=      tornado-6.6.1
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    www python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=t/tornado/}

Index: pkgsrc/www/py-tornado/distinfo
diff -u pkgsrc/www/py-tornado/distinfo:1.40 pkgsrc/www/py-tornado/distinfo:1.41
--- pkgsrc/www/py-tornado/distinfo:1.40 Mon Oct 26 08:11:35 2026
+++ pkgsrc/www/py-tornado/distinfo      Tue Nov 10 09:08:21 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.40 2026/10/26 08:11:35 adam Exp $
+$NetBSD: distinfo,v 1.41 2026/11/10 09:08:21 adam Exp $
 
-BLAKE2s (tornado-6.6.tar.gz) = eb5486024a6bc1a874e0a9d68749a782af692f14ad9b89d69864687c1c3e8a66
-SHA512 (tornado-6.6.tar.gz) = 8c679f13e158f2cd9a7106e057d74c8a6a8c3ed53bfd0fc7963f876e814b0604db3a75e55de376dbf4c644130de9a7d9d64145fbce276533a05787dec1e60f79
-Size (tornado-6.6.tar.gz) = 617998 bytes
+BLAKE2s (tornado-6.6.1.tar.gz) = 3803384bd63b9d9282d0e47258f184547d6dda6e94d4feb3a89df0a7a05a7fda
+SHA512 (tornado-6.6.1.tar.gz) = f8b13445bb1565a5acb18a52729f92ca3d824d2afed0a69e2ef7d99c7637a05bb226d1b38008741ca911ea6045ce139407020fc1f9f6b164818a10cc038ac8e1
+Size (tornado-6.6.1.tar.gz) = 623388 bytes